END TO END REAL-TIME ENCRYPTING PROCESS OF A 
MOBILE COMMERCE WAP DATA TRANSMISSION 
SECTION AND THE MODULE OF THE SAME 

5 FIELD OF THE INVENTION 

The present invention relates to an end to end real-time encrypting 
process of a mobile commerce WAP data transmission section and the 
module of the same. The wireless application environment (WAE) is used 
as a technical platform. An information encryption code security system 
10 matching a public key infrastructure is installed in the wireless markup 
language (WML) server end. This added mechanism can realize the 
security of end to end real-time encrypting process of a mobile commerce 
wireless application protocol (WAP) data transmission section. 

15 BA CKGR O VND OF THE INVENTION 

The wireless application protocol (WAP) specifies the protocol for 
executing the network information transmission on a wireless equipment, 
such as a mobile phone or a PDA. The WAP is developed for wireless 
equipment since the environment is different from other devices and 

20 therefore, a dedicated application protocol is necessary for supporting 
these applications. The superior design of WAP cause that it is compatible 
to most of the communication network, for example, GSM, GPRS, PDC, 
CDPD, CDMA, TDMA, PHS, DECT and third generation mobile phone 
(3G). Under the system of GSM, WAP can be executed through a short 

25 message service (SMS) or a circuit switched data (CSD). CSD is possible 
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to be commercialized due to the bandwidth thereof. WAP has two modes to 
be used in wireless networks, one is used as a WAP gateway between the 
client and the Web server; another is directly embedded into the WAP 
application server connected to the client, here the client is a wireless 
5 communication equipment supporting the WAP, while the web server is a 
network station server installed in Internet. The WAP gateway is an 
interface software installed between the GSM network and the WAN wide 
^ area network for converting the encryption protocol of the WAP and WTLS 
IS into HTTP and SSL / TLS encryption protocol for assisting WML format 
!s flO document and can be acquired from the current Internet. It includes a 
;J WML Encoder, a WML script compiler, a protocol adaptor, and others 
^ (referring to Fig. 1). The WAP application server is embedded with 
; 5e f functions of the WAP gateway for providing to the clients. 
^ However, the defects of the 2 phase security is that a great threaten 

£45 occurs as the mobile commercial information is transferred to the WAP 
gateway for being converted into plain text since the current two phase 
mechanism is divided into (1) WTLS encryption in the transmission from a 
handset to the engaged; and (2) SSL / TLS encryption in the transmission 
from the WAP gateway to the WML server. Since the specifications of the 
20 WTLS and TLS are different, the WAP gateway must restore the WTLS 
encryption text into plain text, then the plain text is encrypted by TLS. 
Therefore, the data must be restored into plain text in the mobile phone 
manage and then is encrypted so as to generate a defect in the process. 
Therefore, the present invention is dedicated to an end to end encryption 
25 technology for compensating the insufficiency of current structure and can 
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be used to the transaction of WAP platform (such as financial process in a 
bank system, transaction stocks, intra-communication in an office, 
transaction of business, etc. 



5 S UMMAR Y OF THE INVENTION 

The present invention relates to an end to end real-time encrypting 
process of a mobile commerce WAP data transmission section and the 
3= module of the same. The feature thereof is that a wireless application 
5 protocol (WAP) is used as a technical platform. An information encryption 
"510 code security system matching a public key infrastructure is installed in 
the WML server end of the current mobile server of a wireless service 
provider. This system includes a handset software encryption and 
decryption module, a cipher server, and a key management. The added 
ri cipher server may dynamically download handset software encryption and 
f=w 15 decryption module and the public key generated by the key management to 
the client, such as a mobile phone or a personal digital assistant, using the 
HTTP service (hyper text transmission protocol service) through a WAP 
gateway of WAN (wide area network), GSM/ GPRS/ CDMA and other 
digital mobile system. 
20 When the user is desired to execute an M-commerce, the user may 

input commerce service according to the indication of the wireless markup 
language (WML) and then the input data is up-link through an encryption 
and decryption process of the handset encryption and decryption module. 
After the information transfers to the WML server, it is decrypted by a 
25 public key correspondent to the cipher server. Then the plain text is 
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transferred to the WML server for executing the following process. By the 
added mechanism, the end to end security of the WAP mobile commerce 
information exchange is realized so as to improve the defect of the 2-phase 
security in the current WAP (edition 1.1) construction. 
5 The WAP communication protocol defined by the WAP Forum has six 

layers (referring to Fig, 2). In the present invention, the uppermost layer 
of the wireless application environment (WAE) is used as a developing 
platform and executing environment. This is different from the current 
:Z WTLS mechanism which is built in the fourth layer of security layer. Since 
%10 the WAE layer is based on the security layer. Therefore, other than 
: « providing a security, the present invention has the effect of being protected 
:=v by the WTLS mechanism. This is one feature of the present invention. 

Therefore, the present invention provides an end to end real-time 
encrypting module of a mobile commerce WAP data transmission section, 
L -i5 in that the uppermost layer of the wireless application environment (WAE) 
is used as a developing platform and executing environment. In the module, 
an information encryption security system is added to the WML server of 
the wireless content service provider (WCP). The system comprises a 
handset software encryption and decryption module, a cipher server and a 
20 key management. 

The present invention provide an end to end real-time encrypting 
process of a mobile commerce WAP data transmission section, in that the 
uppermost layer of the wireless application environment (WAE) is used as 
a developing platform and executing environment. The process includes 
25 steps of: 
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an information encryption security system is added to the WML server 
of the wireless content service provider (WCP). The system comprises a 
handset software encryption and decryption module, a cipher server and a 
key management. 

5 The various objects and advantages of the present invention will be 

more readily understood from the following detailed description when read 
in conjunction with the appended drawing. 

BRIEF DESCRIPTION OF THE DRAWINGS 
; 5 Fig. 1 shows the construction of the wireless application protocol. 

pIO Fig. 2 shows the hierarchy structure of a WAP communication 

protocol. 

v " Fig. 3 is a structure view of the WAP end to end information 

encryption system according to the present invention, 
r* Fig, 4 shows the construction of the WAE as an executing environment 

"45 of a handset encryption and decryption module in the present invention. 

Fig. 5 shows the process for the algorithm of the pre-compressor of 

the present invention, in that the exchange of a bank account is used as an 

example. 

Fig. 6 shows the operation of the symmetric key encryption 
20 mechanism in the present invention. 

Fig. 7 shows the operation of a public key encryption mechanism 
(RSA is used as an example) in the present invention. 

Fig. 8 shows the process of the WAP end to end encryption according 
to the present invention. 
25 Fig. 9 shows the contrast of the constructions of the WAP and STK in 
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the present invention. 

Fig. 10 shows the contrast of the features of WAP and STK in the 
present invention. 

Fig. 11 shows the construction of the WAP end to end encryption of 
5 the present invention being used to a finical market in the present 
invention, 

DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENTS 

:% To further understand the present invention, a detail description of the 

"flO present invention will be described in the following with the appended 

drawings. Those skilled in the art may completely understand the objects, 
^ characteristics and features of the present invention from these 

descriptions. However, those descriptions and the appended drawings are 
!= " only used to describe the present invention instead of being used to 
45 confine the spirit and scope of the present invention defined in the 

appended claims. 

The present invention provide an end to end real-time encrypting 
process of a mobile commerce WAP data transmission section, in that the 
uppermost layer of the wireless application environment (WAE) is used as 

20 a developing platform and executing environment. An information 
encryption code security system (referring to Fig. 3) matching a public key 
infrastructure is installed in the WML server end of the current mobile 
server of a wireless service provider. This system includes a handset 
software encryption and decryption module, a cipher server, and a key 

25 management. The system can realize the end to end security of WAP 
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mobile commerce so as to improve the defect of current 2-phase security. 
Furthermore, the encryption and decryption principle of the public key 

mechanism is used in the present invention. The public key and private key 

generated by the key management are used alternatively, and thus, not only 
5 it can be used to the object of encryption, but also the "un-reject" function 

in certification acknowledge (CA) is achieved. Therefore, the possibility 

of realizing mobile commerce is improved greatly. Another, to solve the 
^ defect of low efficiency in mobile commerce, in the present invention, a 

pre-compressor is installed in the handset software encryption and 
= £I0 decryption module. The pre-compressor with a compressing ratio of one 
:S third and zero distortion is used to process the original plane text so as to 
^ greatly increase the efficiency of the handset. Consequently, the 
;^ application of the present invention to be used in mobile commerce is 

improved. 

The development platform and operating platform of the present invention 
The WAP communication protocol defined by WAP Forum is divided 
into six layers (referring to Fig. 2), which are 

1. WAE (wireless application environment), the WAE defines the 
20 communication protocols in the application layer. The WAE is a 

wireless application environment combined with WWW technology 
and the property of a wireless communication. The WAE causes the 
network systems and the service providers may provide contents 
and services through a micro browser. 
25 2. WSP (wireless session protocol) 
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WSP is a communication protocol of the session layer, which 
provides two services including a contiue connecting service based 
on WTP and discontinuous connecting service based on WDP. 
WTP (wireless transaction protocol): 

WTP is a communication protocol based on the transaction layer of 
the WDP, which is designed for a small client interface (for 
example, mobile phone). 
WTLS (wireless transport layer security) 

WTLS is the security protocol based on a security protocol 
according to the industrial TLS protocol (i.e., secure socket layer, 
SSL). The WTLS is designed to be a security layer on the transport 
layer and is to modify the communication environment in a narrow 
bandwidth. 

WDP (wireless datagram protocol) 

WDP is a communication protocol of a transport layer, which is 
suitable to be constructed on the data service of different 
communication technology, and may provide a common 
communication interface for providing upper layer communication 
protocol of WAP so that the communication protocol including 
application layer, session layer, and security layer can be operated 
directly on the WDP. 

Bearer (data service of the bottom layer) 

WAP is designed to be a communication protocol which can be 
supported by various communication technology, and thus it can be 
built on various communication service, comprising: short message 
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service (SMS), package data, circuit-switched data, etc. 
In the present invention, the uppermost layer of the wireless application 
environment (WAE) is used as a developing platform and executing 
environment. This is different from the current WTLS mechanism which is 
5 built in the fourth layer of security layer. Since the WAE layer is based on 
the security layer. Therefore, other than providing a security, the present 
invention has the effect of being protected by the WTLS mechanism. This 
is one feature of the present invention. 
*-M The WAE application layer executing environment may be used to 

□10 interpret wireless markup language, and wireless markup script language, 
rU and thus is a handset software encryption and decryption module of the 
?Q security mechanism of the present invention. The interpreter of the 
□ WMLScript language in the mobile phone can directly access the data 
M* variables of WML format through a stack memory (referring to Fig. 4). 
□15 Therefore, the input data from WML document can be processed and 
operated by the handset encryption and decryption module, and then is 
transferred to a far end mobile information server WML server so that the 
process of transmission is protected. 



20 The mechanism of data compression of the present invention. 

Since the operation of the public key algorithm is complex and needs 
much time, in order to improve the efficiency of the mobile phone WAE 
executing environment and the convenience thereof, a pre-compressor is 
added to the handset software encryption and decryption module of the 

25 present invention 



9 



Under the consideration that the security mechanism of the present 
invention has a maximum compatibility in the executing environment and 
convenience of the succeeding updating, a pre-compressor is installed in 
the handset software encryption and decryption module. The 
5 pre-compressor with a compressing ratio of one third and zero distortion is 
used to process the original plane text so as to greatly increase the 
efficiency of the handset. Thereby, the present invention can be massively 
used in the mobile commerce. This is another feature of the present 
si invention. The basic principle of the pre-compressor is that by a numerical 
O10 code - character code conversion theory and a selection technique of 
tu carrying, the WML text is converted efficiently so as to generate a high 
ffl compression ratio. Referring to Fig. 5, the compressing process of the 
□ pre-compressor of the present invention is illustrated. In the drawing, an 
M= example of a transaction of account exchange in a man-free bank is 
rl5 illustrated. The account number having an original length of 24 characters 
is compressed as into a character set of ANSI (American National Standard 
Institute) having a length of 8 characters. Therefore, in a high compressing 
speed, a high compressing ratio is achieved. 

The compressing procedure of the pre-compressor will be described 
20 in the following: 

1) The original data is divided into several unit character string 
(UnitBuf), and each character string has 8 or 9 characters; 

2) Each unit character string is converted into a decimal value 
(Unitval); 

25 3) Each decimal value is converted into a unit character string 
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(oxUnitBuf) of hexadecimal system; 

4) Each unit character string (oxUnitBuf) of hexadecimal system is 
divided into two unit character sets (oxCharBuf); 

5) Each unit character set (oxCharBuf) is converted into a decimal 
character code between 0- 255; and 

6) Each character code is directly converted a respective ANSI 
character set. 

In the aforesaid step 1), to use 8 or 9 characters as an unit is based on 
the maximum data length supported by a mobile phone WAE executing 
environment of 64 bits, which can be converted into a decimal value of 
between - 2147483647 ~ 2147483647. If the data is represented by a 
decimal system, it has a length of 10. Therefore, in order to avoid the 
data from overflowing, 8 or 9 characters are used as a unit. 

The basis of the encryption mechanism in the present invention. 

As above description, An information encryption code security system 
matching a public key infrastructure is installed in the WML server end of 
the current mobile server of a wireless service provider. This system 
includes a handset software encryption and decryption module, a cipher 
server, and a key management. In the current encryption code technology, 
there are two primary encryption systems. The first one is a symmetric key 
encryption system and the second one is an asymmetric system (or briefly, 
called as a public key encryption system). The symmetric key encryption 
system has an advantage of quick encryption and decryption. However, 
since in this system, the encryption key and decryption key are identical 
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keys. How to transfer the key to the encryption information receiver, and 
how to share the secret key by the transmitter and receiver are main 
concerns in the symmetric key encryption system (referring to Fig. 6). 
Therefore, the symmetric key is unsuitable for a WML server registered by 
5 many people, i.e., it is not suitable for a client-server mobile commerce 
construction. 

The public key encryption system has improved the defect in the 
symmetric key encryption system. In this system, the encryption key is not 
L M identical to the decryption key. Each key pair has two symmetric keys, one 
oilO is a public key and the other is a private key. In using, the public key can 
W be published to anyone communicated with one own the public key. When 
05 anyone is desired to transmit information to the owner of the public key, 
O the information can be encrypted through the public key and then 
M= transferred to the receiver having the public key. However, only the 
rj5 private key with respect to this public key can decrypt this information. 
Therefore, this asymmetric key cause two persons never contact with one 
another to communicate with one another without interchanging keys in 
advance. 

On the contrary, when the information is encrypted by a private key, 
20 those having a public key with respect to the private key can be used to 
decrypt the information, and thus, the private key can be used as a 
signature to the information. The famous asymmetric key encryption 
system and digital signature algorithm includes Deffi-Hellman, RSA, DSA, 
ElGamal, M-H Knapsack and Rabin, etc. Since a public key symmetric key 
25 is not necessary to exchange keys in advance, it has the advantage of 
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secret communication. Therefore, in the present invention, the public key 
encryption is used in the design of end to end real-time encrypting process 
of a mobile commerce WAP data transmission section and the module of 
the same (referring to Fig. 7). 
5 The encryption system of the present invention 

1. The handset encryption and decryption module and cipher server 

In the present invention, An information encryption code security 
system matching a public key infrastructure is installed in the WML server 
end of the current mobile server of a wireless service provider. This 

■ 310 system includes a handset software encryption and decryption module, a 

'■'d cipher server, and a key management. 

X When an user registers into the WML server of WCP through a WAP 

w; network, the WML server will inform the cipher server to be responsible 
for actuating the public key remained in the handset software encryption 
:;15 and decryption module and the key management through the cipher server 
of the present invention for the inter-process communication interface, 
such as a TCP / UDP communication protocol, a COM object mode 
interface, a CORBA object model interface, a DDE dynamic data 
interchange and RPC far-end process calling, etc., provided by the 
20 operation system of various computers. 

The public key is downloaded to the client, such as a mobile phone or 
a personal digital assistant, using the HTTP service (hyper text 
transmission protocol service) through a WAP gateway of WAN (wide area 
network), GSM/ GPRS/ CDMA and other digital mobile system. When the 
25 user is desired to execute an M-commerce, the user may input commerce 
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service according to the indication of the wireless markup language (WML) 
and then the input data is up-linked through an encryption and decryption 
process of the handset encryption and decryption module. After the 
information transfers to the WML server, it is decrypted by a public key 
correspondent to the cipher server. Then the plain text is transferred to the 
WML server for executing the following process. 

On the contrary, if it is desired to down-link the personal commercial 
information (such as checking account in a bank), the user must input a 
private key to be left in the stack memory of the mobile WAE environment 
as a standby. When the WML server transfers the personal commercial 
information to be down-linked to cipher server and inform the cipher 
server to open the public key remained in the handset software encryption 
and decryption module and key management for executing an encryption 
algorithm in the server end in advance. Then, the handset software 
encryption and decryption module and the encrypted data are down-linked 
to the client through the HTTP service. Then, the private key remained in 
the WAE executing environment is used to decrypt the encryption data and 
then the decryption plain text is transferred to be displayed with the 
original form through a WML format document. 

2. Key management 

The applications and services for assisting the public key encryption 
system can be viewed as a part of the public key base construction. The 
responsibility of the key management in the present invention includes a) 
key generation and conditions; b) sharing of the key. 
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a) Key generation and condition 

An ideal key must be generated randomly, unpredictable, and is kept 
in secret. Furthermore, for the keys demanded and updated frequently 
are generated by a pseudo random process. Other than the property of 
unpredictability. The key management of the present invention must 
satisfy some specific algorithm. For example, the keys in the RSA 
system must have enhanced prime numbers, and other properties. 

b) Sharing the keys: 

In the aspect of sharing the keys, other than providing the privacy 
and secret of the files and data through encryption technologies, the 
computer system must assure that the encryption data must be restored. 
The key management of the present invention has the mechanism of 
secret sharing, in that a key is divided into several key shadows. The 
original key is restored if only several key shadows of a specific 
number is combined. When the key is lost or destroyed, the data 
encryption through this key can not be restored. 

Comparison of the encryption mechanism of the present invention with the 
STK (STM Toolkits 

Because in the public key encryption system, no key is necessary to be 
exchanged in advance for achieving the advantage of secret communication. 
In the present invention, the end to end real-time encrypting process of a 
mobile commerce WAP data transmission section and the module of the 
same are designed based on the "public key encryption system". This is 
completely different from the encryption mechanism used in the 
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conventional mobile phone STK (SIM Tool kit) transmission in which a 
symmetric key encryption system (such as PIN1, PIN3, 3DES) is used. In 
the application of SIM Tookit (subscriber identity module application 
toolkit), the mobile phone company cooperates with the SIM card 
5 manufacturer to record some extra paying services on the microprocessor 
of the client identification card. 

Thereby, the user may select the service directly on the menu of the 
handset. Since the STK transfers SMS (short message signal) through a 
handset matching the specification of GSM Phase + 2, basically, the data is 

10 exchanged in the intranet of the communication company. Therefore, 
conventionally, the STK has a higher security in the e-commerce than the 
WAP construction. While this closing construction is not suitable for the 
mobile commerce application based on Internet. Although the symmetric 
key encryption system is beneficial to keep the data in secret, this system 

15 has no the "un-reject M function for identifying the user. Thus, the 
application is confined (referring to Fig. 9). Therefore, the information 
security system of the present invention, a public key mechanism is 
directly used to the WAP construction. Not only the defect of insufficient 
encryption in the conventional WAP construction is improved by the 

20 present invention, but also the "un-reject" property in the digital 
signature" is complete. This is a novel feature of the present invention 
(referring to Fig. 10). 

In summary, the present invention relates to an end to end real-time 
encrypting process of a mobile commerce WAP data transmission section 

25 and the module of the same. The feature thereof is that a wireless 
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application protocol is used as a technical platform. An information 
encryption code security system matching a public key infrastructure is 
installed in the WML server end of the current mobile server of a wireless 
service provider. By the added mechanism, the end to end security of the 
WAP mobile commerce information exchange is realized so as to improve 
the defect of the 2-phase security in the current WAP (edition 1.1) 
construction. Furthermore, the encryption and decryption principle of 
the public key mechanism is used in the present invention. The public key 
and private key generated by the key management are used alternatively, 
and thus, not only it can be used to the object of encryption, but also the 
n un-reject" function in certification acknowledge (CA) is achieved. 
Therefore, the possibility of realizing mobile commerce is improved 
greatly. Another, to solve the defect of low efficiency in mobile commerce, 
in the present invention, a pre-compressor is installed in the handset 
software encryption and decryption module. The pre-compressor with a 
compressing ratio of one third and 0 distortion is used to process the 
original plane text so as to greatly increase the efficiency of the handset. 
Consequently, the application of the present invention to be used in mobile 
commerce is improved. 

Although the present invention has been described with reference to 
the preferred embodiments, it will be understood that the invention is not 
limited to the details described thereof. Various substitutions and 
modifications have been suggested in the foregoing description, and others 
will occur to those of ordinary skill in the art. Therefore, all such 
substitutions and modifications are intended to be embraced within the 
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scope of the invention as defined in the appended claims. 
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Attachment : Handset encryption and decryption module and 
M-H algorithm example 

extern function Cipher(szTime, szURL, PublicK, 
5 CompressParam, BIO) 

{ 

if(String.compare(WMLBrowser.getVar( M CompressInput' r ) ? 

"1")! = 0 ) WMLBrowser.go( M http://" + szURL + 

"?RtnCode=NoCompress&Time=" + szTime); 
10 var Encode = ""; 

var CharPlainBit=" M ; 

var nCipher=0; 

var i=0 , j=0; 

var nLen=0; 
15 var nValue=0; 

nLen=String.length(B 10); 

nLen=nLen div 3; 

for( i=0; i< nLen ; i++ ) 

{ 

20 nValue=Lang.parseInt( String. sub String(B 1 0,i* 3,3)); 
CharPlainBit=Gener at eCharPlainBit(n Value); 
nC i pher= Generate C hare ipher(CharPlainB it, PublicK); 
if( j==0 && i==0 ) 
Encode=Encode + nCipher ; 

19 



else 

Encode=Encode + "-" + nCipher ; 
} 

Encode=Encode + "-"+CompressParam; 
5 WMLBrowser.setVar("CompressInput", "0"); 

WMLBrowser.go( "http://" + szURL + "?Cipher=" + 

Encode + "&RtnCode=Success&Time=" + szTime); 

} 

function GenerateCharPlainBit(Plain) 
10 { 

var nLen^l ; 

var modi =0; 

var mod2 = 0; 

var bit=0; 
15 var nChar^O; 

var cChar=" "; 

var PlainBit=""; 

var i^O; 

var nRate=2; 
20 nChar^Plain; 

for(i = 0;i<8;i++) 

{ 

modl=nChar % nRate; 
if( nRate-=2 ) 
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mod2=0; 
else 

mod2=nChar%(nRate div 2); 

bit=modl-mod2; 

if(bit==0) 

PlainBit= ,, 0'*+PlainBit; 
else 

PlainBit="l"+PlainBit; 
nRate=nRate*2; 

} 

return PlainBit; 
} 

function GenerateCharcipher(CharPlainBit,PublicK) 
{ 

var cChar=""; 
var nChar=0; 
var nCipher=0; 
var i^O; 

var PublicChar=" M ; 
for(i=0;i<8;i++) 

{ 

cChar=String.charAt(CharPlainBit,i); 

if(String.compare(cChar/ f O")==0) 
nChar=0; 
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else 

nChar=l ; 

PublicChar=String. element At(PublicK,i/- ,? ); 

nCipher=nCipher+nChar*Lang.parseInt(PublicChar); 

} 

return nCipher; 

} 
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